Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: dYfdD87c7gK83UoxfwXFj/RHOMWJ7XLImvtrf6UBgsc=
Subject key identifier: D7:EA:11:05:2C:B3:CE:F6:B8:27:06:40:36:72:69:C4:C2:04:ED:A3
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 019FAA8893DAABA2E4D5DF369D28EAE8FF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: g4hWj5RM5/aosOQ2YdSVspxIjk4aOWc1ZohIb5f1tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:93:da:ab:a2:e4:d5:df:36:9d:28:ea:e8:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=d7ea11052cb3cef6b8270640367269c4c204eda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:ab:69:c0:6e:44:d4:1d:1a:96:a0:07:62:
e6:4d:0a:68:ad:da:f7:14:de:52:60:c4:b4:d0:b2:
3d:d0:c1:f2:41:95:1f:14:21:c5:5b:bb:92:f6:2a:
dc:db:e4:42:bf:d3:c6:47:12:43:28:89:9b:f9:36:
2e:7f:bc:76:71:32:c3:ed:06:e6:55:17:11:99:85:
26:7a:b3:0c:1d:35:03:1b:fd:53:50:d0:61:16:ce:
6e:0f:da:04:68:3f:fd:fb:3b:97:39:88:1e:5f:68:
39:04:58:60:41:3b:d8:06:f4:b3:b8:31:16:df:b5:
3a:56:db:b8:3e:a0:d1:49:4b:c5:25:35:e1:f4:aa:
80:ca:13:7b:7f:2b:14:13:1c:ab:67:5d:35:1e:78:
b1:fd:40:a3:3f:a5:7c:04:8a:bd:65:82:2c:8e:48:
e2:f0:7b:dd:0b:55:74:a6:77:e5:c3:e9:97:70:a0:
01:72:30:d7:79:b3:d5:8a:2f:f5:34:5b:1f:42:45:
84:81:e8:24:39:fd:5e:39:61:08:a2:58:f2:fc:63:
dd:81:b4:dd:3a:87:87:24:91:a4:82:68:9c:48:ce:
ea:0f:e3:9d:df:0b:7d:8e:19:48:67:26:6d:85:b9:
fc:d7:a5:e9:cb:dc:69:5d:49:05:b3:32:d5:29:6f:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:11:05:2C:B3:CE:F6:B8:27:06:40:36:72:69:C4:C2:04:ED:A3
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:3f:9c:fc:17:dc:7c:89:28:df:53:6a:a8:95:d7:e0:e7:
d4:cb:a8:82:0f:fa:66:ec:94:7f:1b:75:3d:24:be:68:f5:71:
eb:f4:f6:44:6c:b9:e3:f0:44:6f:74:45:b3:c0:d8:ad:4b:0d:
a1:62:c2:b8:c3:ec:28:d1:f8:a0:f2:c2:0d:d5:0a:03:50:c4:
57:70:3f:0d:4a:92:81:ab:77:b0:ae:5c:f5:3d:0e:c3:4f:d7:
5f:85:4a:58:a2:e7:6f:ac:d7:ee:9a:b6:fc:50:53:d7:f0:29:
ce:29:1b:ba:bd:49:69:2b:76:5f:a0:84:68:bd:ef:04:2b:87:
c2:fd:7f:d2:d5:f2:ef:7b:9a:ca:78:3a:8a:34:ca:31:50:0e:
64:9f:43:a6:0b:ff:1f:5a:96:83:89:70:ea:0a:71:df:e3:db:
31:cc:f6:6c:c7:d7:ae:c3:11:8d:52:a2:42:9b:12:0f:12:b0:
66:9c:ff:c4:00:79:93:f4:38:9d:ac:ec:c4:cc:ab:14:d6:4e:
aa:d6:ac:18:31:33:78:ed:af:b0:23:ca:09:fa:21:28:d6:b2:
1e:f3:6e:ee:37:11:bc:49:79:30:9f:89:f3:d7:8e:35:ae:9b:
49:31:f5:1e:19:18:d4:8c:54:ce:fd:25:55:00:47:77:43:5d:
27:a4:82:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiJPaq6Lk1d82nSjq6P9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NGI4MmQ3MTkxNDQwMDIwNTFkYTBmODhjNzY4ZGU0NDBh
YzIwYmQwHhcNMjYwNzI4MjEwMTQ1WhcNMjYwNzI5MjEwMTQ1WjAzMTEwLwYDVQQD
EyhkN2VhMTEwNTJjYjNjZWY2YjgyNzA2NDAzNjcyNjljNGMyMDRlZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4aracBuRNQdGpagB2LmTQpordr3
FN5SYMS00LI90MHyQZUfFCHFW7uS9irc2+RCv9PGRxJDKImb+TYuf7x2cTLD7Qbm
VRcRmYUmerMMHTUDG/1TUNBhFs5uD9oEaD/9+zuXOYgeX2g5BFhgQTvYBvSzuDEW
37U6Vtu4PqDRSUvFJTXh9KqAyhN7fysUExyrZ101Hnix/UCjP6V8BIq9ZYIsjkji
8HvdC1V0pnflw+mXcKABcjDXebPVii/1NFsfQkWEgegkOf1eOWEIoljy/GPdgbTd
OoeHJJGkgmicSM7qD+Od3wt9jhlIZyZthbn816Xpy9xpXUkFszLVKW9sBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfqEQUss872uCcGQDZyacTCBO2jMB8GA1UdIwQY
MBaAFNVLgtcZFEACBR2g+Ix2jeRArCC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yN2NjMTktNzg4Ny00MmZhLWE2MmMt
NmU1ZjlkMzk4Mjc5LzEvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yN2NjMTktNzg4Ny00MmZhLWE2MmMtNmU1ZjlkMzk4Mjc5
LzEvMVV1QzF4a1VRQUlGSGFENGpIYU41RUNzSUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5w/nPwX
3HyJKN9TaqiV1+Dn1Muogg/6ZuyUfxt1PSS+aPVx6/T2RGy54/BEb3RFs8DYrUsN
oWLCuMPsKNH4oPLCDdUKA1DEV3A/DUqSgat3sK5c9T0Ow0/XX4VKWKLnb6zX7pq2
/FBT1/Apzikbur1JaSt2X6CEaL3vBCuHwv1/0tXy73uayng6ijTKMVAOZJ9Dpgv/
H1qWg4lw6gpx3+PbMcz2bMfXrsMRjVKiQpsSDxKwZpz/xAB5k/Q4nazsxMyrFNZO
qtasGDEzeO2vsCPKCfohKNayHvNu7jcRvEl5MJ+J89eONa6bSTH1HhkY1IxUzv0l
VQBHd0NdJ6SCYQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:26:07 2026 by rpki-client